20130510,微软五月安全补丁提前通知

大家好,我们是微软大中华区安全支持团队。

在此提前通知各位:微软计划于北京时间5月15日清晨发布10个安全补丁,其中2个为严重等级补丁,其余八个为重要等级补丁,共修复33个安全漏洞。2个严重等级补丁修复了 Microsoft Windows 和 Internet Explorer 中的安全漏洞。微软正在积极为 IE 浏览器制定安全通报2847140中提及的安全漏洞。重要等级补丁修复 Microsoft Windows, Microsoft Office, Server and Tools 和 .NET Framework 中的安全漏洞。

下表概述了本次提前公告(按严重等级和公告 ID 排序):

Bulletin ID

Maximum Severity Rating and Vulnerability Impact

Restart Requirement

Affected Software

Bulletin 1

Critical Remote Code Execution

Requires restart

Microsoft Windows, Internet Explorer

Bulletin 2

Critical Remote Code Execution

Requires restart

Microsoft Windows, Internet Explorer

Bulletin 3

Important Denial of Service

Requires restart

Microsoft Windows

Bulletin 4

Important Spoofing

May require restart

Microsoft Windows, .NET Framework

Bulletin 5

Important Remote Code Execution

May require restart

Microsoft Lync

Bulletin 6

Important Remote Code Execution

May require restart

Microsoft Office

Bulletin 7

Important Remote Code Execution

May require restart

Microsoft Office

Bulletin 8

Important Information Disclosure

May require restart

Microsoft Office

Bulletin 9

Important Information Disclosure

May require restart

Microsoft Windows Essentials

Bulletin 10

Important Elevation of Privilege

Requires restart

Microsoft Windows

按照受影响的操作系统分类如下 :

Windows XP

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Critical

Critical

None

Important

Important

Windows XP Service Pack 3

Internet Explorer 6 (Critical) Internet Explorer 7 (Critical) Internet Explorer 8 (Critical)

Internet Explorer 8 (Critical)

Not applicable

Windows XP Service Pack 3 (Important)

Windows XP Service Pack 3 (Important)

Windows XP Professional x64 Edition Service Pack 2

Internet Explorer 6 (Critical) Internet Explorer 7 (Critical) Internet Explorer 8 (Critical)

Internet Explorer 8 (Critical)

Not applicable

Windows XP Professional x64 Edition Service Pack 2 (Important)

Windows XP Professional x64 Edition Service Pack 2 (Important)

Windows Server 2003

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Moderate

Moderate

None

Important

None

Windows Server 2003 Service Pack 2

Internet Explorer 6 (Moderate) Internet Explorer 7 (Moderate) Internet Explorer 8 (Moderate)

Internet Explorer 8 (Moderate)

Not applicable

Windows Server 2003 Service Pack 2 (Important)

Windows Server 2003 Service Pack 2 (No severity rating)

Windows Server 2003 x64 Edition Service Pack 2

Internet Explorer 6 (Moderate) Internet Explorer 7 (Moderate) Internet Explorer 8 (Moderate)

Internet Explorer 8 (Moderate)

Not applicable

Windows Server 2003 x64 Edition Service Pack 2 (Important)

Windows Server 2003 x64 Edition Service Pack 2 (No severity rating)

Windows Server 2003 with SP2 for Itanium-based Systems

Internet Explorer 6 (Moderate) Internet Explorer 7 (Moderate)

Not applicable

Not applicable

Windows Server 2003 with SP2 for Itanium-based Systems (Important)

Windows Server 2003 with SP2 for Itanium-based Systems (No severity rating)

Windows Vista

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Critical

Critical

None

Important

Important

Windows Vista Service Pack 2

Internet Explorer 7 (Critical) Internet Explorer 8 (Critical) Internet Explorer 9 (Critical)

Internet Explorer 8 (Critical) Internet Explorer 9 (No severity rating)

Not applicable

Windows Vista Service Pack 2 (Important)

Windows Vista Service Pack 2 (Important)

Windows Vista x64 Edition Service Pack 2

Internet Explorer 7 (Critical) Internet Explorer 8 (Critical) Internet Explorer 9 (Critical)

Internet Explorer 8 (Critical) Internet Explorer 9 (No severity rating)

Not applicable

Windows Vista x64 Edition Service Pack 2 (Important)

Windows Vista x64 Edition Service Pack 2 (Important)

Windows Server 2008

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 4

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Moderate

Moderate

None

Important

Important

Windows Server 2008 for 32-bit Systems Service Pack 2

Internet Explorer 7 (Moderate) Internet Explorer 8 (Moderate) Internet Explorer 9 (Moderate)

Internet Explorer 8 (Moderate) Internet Explorer 9 (No severity rating)

Not applicable

Windows Server 2008 for 32-bit Systems Service Pack 2 (Important)

Windows Server 2008 for 32-bit Systems Service Pack 2 (Important)

Windows Server 2008 for x64-based Systems Service Pack 2

Internet Explorer 7 (Moderate) Internet Explorer 8 (Moderate) Internet Explorer 9 (Moderate)

Internet Explorer 8 (Moderate) Internet Explorer 9 (No severity rating)

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2 (Important)

Windows Server 2008 for x64-based Systems Service Pack 2 (Important)

Windows Server 2008 for Itanium-based Systems Service Pack 2

Internet Explorer 7 (Moderate)

Not applicable

Not applicable

Windows Server 2008 for Itanium-based Systems Service Pack 2 (Important)

Windows Server 2008 for Itanium-based Systems Service Pack 2 (Important)

Windows 7

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Critical

Critical

None

Important

Important

Windows 7 for 32-bit Systems Service Pack 1

Internet Explorer 8 (Critical) Internet Explorer 9 (Critical) Internet Explorer 10 (Critical)

Internet Explorer 8 (Critical) Internet Explorer 9 (No severity rating)

Not applicable

Windows 7 for 32-bit Systems Service Pack 1 (Important)

Windows 7 for 32-bit Systems Service Pack 1 (Important)

Windows 7 for x64-based Systems Service Pack 1

Internet Explorer 8 (Critical) Internet Explorer 9 (Critical) Internet Explorer 10 (Critical)

Internet Explorer 8 (Critical) Internet Explorer 9 (No severity rating)

Not applicable

Windows 7 for x64-based Systems Service Pack 1 (Important)

Windows 7 for x64-based Systems Service Pack 1 (Important)

Windows Server 2008 R2

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Moderate

Moderate

None

Important

Important

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Internet Explorer 8 (Moderate) Internet Explorer 9 (Moderate) Internet Explorer 10 (Moderate)

Internet Explorer 8 (Moderate) Internet Explorer 9 (No severity rating)

Not applicable

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Important)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1

Internet Explorer 8 (Moderate)

Internet Explorer 8 (Moderate)

Not applicable

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (Important)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (Important)

Windows 8

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Critical

None

Important

Important

Important

Windows 8 for 32-bit Systems

Internet Explorer 10 (Critical)

Not applicable

Windows 8 for 32-bit Systems (Important)

Windows 8 for 32-bit Systems (Important)

Windows 8 for 32-bit Systems (Important)

Windows 8 for 64-bit Systems

Internet Explorer 10 (Critical)

Not applicable

Windows 8 for 64-bit Systems (Important)

Windows 8 for 64-bit Systems (Important)

Windows 8 for 64-bit Systems (Important)

Windows Server 2012

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Moderate

None

Important

Important

Important

Windows Server 2012

Internet Explorer 10 (Moderate)

Not applicable

Windows Server 2012 (Important)

Windows Server 2012 (Important)

Windows Server 2012 (Important)

Windows RT

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

Critical

None

Moderate

Important

Important

Windows RT

Internet Explorer 10 (Critical)

Not applicable

Windows RT (Moderate)

Windows RT (Important)

Windows RT (Important)

Server Core installation option

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 3

Bulletin 4

Bulletin 10

Aggregate Severity Rating

None

None

Important

Important

Important

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Not applicable

Not applicable

Not applicable

Not applicable

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (Important)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Not applicable

Not applicable

Not applicable

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) (Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Not applicable

Not applicable

Not applicable

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (Important)

Windows Server 2012 (Server Core installation)

Not applicable

Not applicable

Windows Server 2012 (Server Core installation) (Important)

Windows Server 2012 (Server Core installation) (Important)

Windows Server 2012 (Server Core installation) (Important)

微软 Office 软件相关信息 :

Microsoft Office Software

Bulletin Identifier

Bulletin 6

Bulletin 7

Bulletin 8

Aggregate Severity Rating

Important

Important

Important

Microsoft Office 2003 Service Pack 3

Microsoft Publisher 2003 Service Pack 3 (Important)

Microsoft Word 2003 Service Pack 3 (Important)

Not applicable

Microsoft Office 2007 Service Pack 3

Microsoft Publisher 2007 Service Pack 3 (Important)

Not applicable

Not applicable

Microsoft Office 2010 Service Pack 1 (32-bit editions)

Microsoft Publisher 2010 Service Pack 1 (32-bit editions) (Important)

Not applicable

Not applicable

Microsoft Office 2010 Service Pack 1 (64-bit editions)

Microsoft Publisher 2010 Service Pack 1 (64-bit editions) (Important)

Not applicable

Not applicable

Microsoft Word Viewer

Not applicable

Microsoft Word Viewer (Important)

Not applicable

Microsoft Visio 2003 Service Pack 3

Not applicable

Not applicable

Microsoft Visio 2003 Service Pack 3 (Important)

Microsoft Visio 2007 Service Pack 3

Not applicable

Not applicable

Microsoft Visio 2007 Service Pack 3 (Important)

Microsoft Visio 2010 Service Pack 1 (32-bit editions)

Not applicable

Not applicable

Microsoft Visio 2010 Service Pack 1 (32-bit editions) (Important)

Microsoft Visio 2010 Service Pack 1 (64-bit editions)

Not applicable

Not applicable

Microsoft Visio 2010 Service Pack 1 (64-bit editions) (Important)

微软通信平台软件相关信息 :

Microsoft Lync

Bulletin Identifier

Bulletin 5

Aggregate Severity Rating

Important

Microsoft Communicator 2007 R2

Microsoft Communicator 2007 R2 (Important)

Microsoft Lync 2010 (32-bit)

Microsoft Lync 2010 (32-bit) (Important)

Microsoft Lync 2010 (64-bit)

Microsoft Lync 2010 (64-bit) (Important)

Microsoft Lync 2010 Attendee (admin level install)

Microsoft Lync 2010 Attendee (admin level install) (Important)

Microsoft Lync 2010 Attendee (user level install)

Microsoft Lync 2010 Attendee (user level install) (Important)

Microsoft Lync Server 2013

Microsoft Lync Server 2013 (Important)

微软消费者软件相关信息 :

Windows Essentials

Bulletin Identifier

Bulletin 9

Aggregate Severity Rating

Important

Windows Essentials 2011

Windows Essentials 2011 (Important)

Windows Essentials 2012

Windows Essentials 2012 (Important)

以下为提前通知的文章全文(英文),请各位先行评估了解受影响的系统。

Microsoft Security Bulletin Advance Notification for May 2013

https://technet.microsoft.com/en-us/security/bulletin/ms13-may

微软大中华区安全支持团队

2013年5月10日